|
CVE Reference: CVE-2007-0506
|
|
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.
|
|
Original Page at CVE MITRE:
CVE-2007-0506
|
|
Description:
The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123 module for Drupal allows remote authenticated users to bypass other access control modules and obtain attached files by guessing the filename, and obtain issue information via direct requests.
|
|
CVE Status:
Candidate
|
|
References:
XF
http://xforce.iss.net/xforce/xfdb/31727
SAID
Secunia Advisory: SA23887
OSVDB
32135
CONFIRM
http://drupal.org/node/112146
BID
22224
|
|
|
Return to the previous page.
|
